Build log
host
spawn_sdk 2.0.0-RC9 · fail · run spawn_sdk-2.0.0-RC9-1791107789864
172 of 172 lines
1Resolving Hex dependencies...2Resolution completed in 0.388s3Unchanged:4 acceptor_pool 1.0.15 broadway 1.3.06 castore 1.0.217 chacha20 1.0.48 circular_buffer 1.1.09 connection 1.1.010 cowboy 2.19.011 cowlib 2.20.0 VULNERABLE!12 EEF-CVE-2026-43966 (MEDIUM)13 aka: CVE-2026-43966, GHSA-w4f7-4cxr-rv3c14 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/215 https://osv.dev/vulnerability/EEF-CVE-2026-439661617 EEF-CVE-2026-43969 (LOW)18 aka: CVE-2026-43969, GHSA-g2wm-735q-3f5619 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/120 https://osv.dev/vulnerability/EEF-CVE-2026-4396921 ctx 0.6.022 curve25519 1.0.623 decimal 2.4.1 VULNERABLE!24 EEF-CVE-2026-32686 (MEDIUM)25 aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v26 Unbounded exponent in decimal enables unauthenticated DoS27 https://osv.dev/vulnerability/EEF-CVE-2026-3268628 decorator 1.4.029 delta_crdt 0.6.530 ed25519 1.5.231 elixir_make 0.10.032 equivalex 1.0.333 finch 0.24.034 flame 0.5.435 flame_k8s_backend 0.7.036 flow 1.2.437 gen_stage 1.3.238 gnat 1.18.039 googleapis 0.1.040 gproc 1.2.041 grpc 0.11.5 VULNERABLE!42 EEF-CVE-2026-53430 (HIGH)43 aka: CVE-2026-53430, GHSA-6ccx-9c9f-327w44 grpc gzip decompression bomb in GRPC.Compressor.Gzip.decompress/145 https://osv.dev/vulnerability/EEF-CVE-2026-534304647 EEF-CVE-2026-48854 (HIGH)48 aka: CVE-2026-48854, GHSA-q8gf-9rvj-gmgj49 Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc50 https://osv.dev/vulnerability/EEF-CVE-2026-488545152 EEF-CVE-2026-48853 (CRITICAL)53 aka: CVE-2026-48853, GHSA-grp7-v8xh-rj7h54 Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc55 https://osv.dev/vulnerability/EEF-CVE-2026-488535657 EEF-CVE-2026-48599 (HIGH)58 aka: CVE-2026-48599, GHSA-mwr4-5g34-j5cq59 Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding60 https://osv.dev/vulnerability/EEF-CVE-2026-4859961 grpcbox 0.18.062 gun 2.6.0 VULNERABLE!63 GHSA-w4f7-4cxr-rv3c (MEDIUM)64 aka: CVE-2026-43966, EEF-CVE-2026-4396665 cowboy and gun affected by an HTTP Request/Response Splitting vulnerability66 https://osv.dev/vulnerability/GHSA-w4f7-4cxr-rv3c67 highlander 0.2.168 horde 0.10.069 hpack_erl 0.3.070 hpax 0.1.2 VULNERABLE!71 EEF-CVE-2026-58226 (HIGH)72 aka: CVE-2026-58226, GHSA-jj2p-32j7-whj273 Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax74 https://osv.dev/vulnerability/EEF-CVE-2026-5822675 interactive_cmd 0.1.476 iter 0.1.377 jason 1.4.578 jetstream 0.0.9 RETIRED!79 (renamed) Merged into the main nats.ex (gnat) library. Use Gnat.Jetstream from the :gnat package instead.80 k8s 2.8.081 k8s_webhoox 0.2.082 kcl 1.5.283 libcluster 3.5.084 libring 1.7.085 merkle_map 0.2.286 mime 2.0.787 mint 1.10.288 mint_web_socket 1.0.689 nebulex 2.6.690 nerves 2.0.0-pre.291 nerves_discovery 0.1.592 nerves_logging 0.2.493 nerves_runtime 0.13.1394 nerves_system_bbb 2.30.295 nerves_system_br 1.34.496 nerves_system_mangopi_mq_pro 0.17.297 nerves_system_qemu_aarch64 0.4.298 nerves_system_rpi0 2.1.299 nerves_system_rpi4 2.1.2100 nerves_system_rpi5 2.1.2101 nerves_system_trellis 0.5.0102 nerves_system_x86_64 1.34.2103 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.1104 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.1105 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.1106 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.1107 nerves_toolchain_x86_64_nerves_linux_musl 15.3.1108 nerves_uevent 0.1.7109 nimble_options 1.1.1110 nimble_parsec 1.4.2111 nimble_pool 1.1.0112 nkeys 0.3.1113 opentelemetry 1.7.0114 opentelemetry_api 1.5.0115 opentelemetry_ecto 1.2.0116 opentelemetry_exporter 1.11.0117 opentelemetry_process_propagator 0.3.0118 phoenix_pubsub 2.3.0119 phoenix_pubsub_nats 0.2.3120 plug 1.20.3121 plug_crypto 2.2.0122 pluggable 1.1.0123 poly1305 1.0.4124 poolboy 1.5.2125 property_table 0.3.4126 protobuf 0.17.0127 protobuf_generate 0.2.1128 ranch 2.3.0129 retry 0.19.0130 ring_logger 0.11.7131 salsa20 1.0.4132 shards 1.1.1133 spawn 2.0.0-RC9134 spawn_sdk 2.0.0-RC9135 ssl_verify_fun 1.1.7136 tablet 0.3.3137 telemetry 1.4.2138 telemetry_metrics 1.2.0139 telemetry_metrics_prometheus_core 1.2.1140 telemetry_poller 1.3.0141 tls_certificate_check 1.35.0142 toolshed 0.5.0143 ts_chatterbox 0.16.0144 uboot_env 1.0.2145 uuid 1.1.8146 x509 0.8.10147 yamerl 0.10.0148 yaml_elixir 2.12.2149Found retired packages, see above for details150Found packages with security advisories, see above for details151All dependencies have been fetched152==> pluggable153Compiling 4 files (.ex)154Generated pluggable app155warning: "xref: [exclude: ...]" in your mix.exs file is deprecated, instead use: "elixirc_options: [no_warn_undefined: ...]"156 (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:243: Mix.Tasks.Compile.Elixir.xref_exclude_opts/2157 (mix 1.20.3) lib/mix/tasks/compile.elixir.ex:142: Mix.Tasks.Compile.Elixir.run/1158 (mix 1.20.3) lib/mix/task.ex:502: anonymous fn/3 in Mix.Task.run_task/5159 (mix 1.20.3) lib/mix/task.compiler.ex:299: Mix.Task.Compiler.run_compiler/2160 (mix 1.20.3) lib/mix/task.compiler.ex:287: Mix.Task.Compiler.run/4161 (mix 1.20.3) lib/mix/tasks/compile.all.ex:75: Mix.Tasks.Compile.All.do_run/2162163==> x509164Compiling 24 files (.ex)165166== Compilation error in file lib/x509/asn1.ex ==167** (ArgumentError) no record AttributePKCS-10 found at /usr/local/lib/erlang/lib/public_key-1.21.6/include/PKCS-FRAME.hrl. Or the record does not exist or its entry is malformed or depends on other include files168 (elixir 1.20.3) lib/record/extractor.ex:60: Record.Extractor.extract_record/2169 lib/x509/asn1.ex:73: anonymous fn/1 in :elixir_compiler_86.__MODULE__/1170 (elixir 1.20.3) lib/enum.ex:983: Enum."-each/2-lists^foreach/1-0-"/2171 lib/x509/asn1.ex:57: (module)172could not compile dependency :x509, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile x509 --force", update it with "mix deps.update x509" or clean it with "mix deps.clean x509"